I haven't been in the app development space in ages, are people really exposing their service meshes to public clients? I have trouble imagining a case where ex

I haven't been in the app development space in ages, are people really exposing their service meshes to public clients? I have trouble imagining a case where external clients could cause sufficient load for this to matter, but also where relying on the client to do it right wouldn't be a DoS risk.